[cabf_validation] Change to EV 9.2.7

[Adriano Santoni]

+1



Il 02/03/2017 20:28, Mark B. Cooper via Validation ha scritto:
>
> I suspect defining the place of business as being the legally 
> registered location of the business would be a more accurate and 
> descriptive term. This would be easier to verify in D&B records as 
> well as other sources. “a place” of business is going to be much 
> harder for issuers to verify as a business may have many locations 
> that aren’t necessarily registered with entities.
>
> -Mark
>
> *Mark B. Cooper*
>
> President & Founder
>
> PKI Solutions Inc.
>
> www.pkisolutions.com
>
> Telephone: +1 971 231 5523
>
> *From:* Validation [mailto:validation-bounces at cabforum.org] *On Behalf 
> Of *Rick Andrews via Validation
> *Sent:* Wednesday, March 1, 2017 3:48 PM
> *To:* CA/Browser Forum Validation WG List <validation at cabforum.org>
> *Cc:* Rick Andrews <Rick_Andrews at symantec.com>
> *Subject:* Re: [cabf_validation] Change to EV 9.2.7
>
> Jeremy,
>
> “This field MUST contain the address of the physical location of the 
> Subject’s Place of Business.” What does “the” mean here? Many 
> businesses have multiple physical locations. Should it be “a” instead? 
> Should we clarify that it doesn’t have to be the physical location of 
> the server(s) hosting the certificate?
>
> -Rick
>
> *From:* Validation [mailto:validation-bounces at cabforum.org] *On Behalf 
> Of *Jeremy Rowley via Validation
> *Sent:* Wednesday, February 22, 2017 11:30 PM
> *To:* CA/Browser Forum Validation WG List <validation at cabforum.org 
> <mailto:validation at cabforum.org>>
> *Cc:* Jeremy Rowley <jeremy.rowley at digicert.com 
> <mailto:jeremy.rowley at digicert.com>>
> *Subject:* Re: [cabf_validation] Change to EV 9.2.7
>
> I’ve created this as ballot 191. Do we have a second endorser?
>
> Ballot 191 - Clarify Place of Business Information Field Inclusion
>
> The current EV Guidelines are not clear on what address information is 
> required in a certificate. This ballot clarifies the requirements.
>
> --Motion Begins--
>
> A. Modify Section 9.2.7 as follows:
>
> '''9.2.7. Subject Physical Address of Place of Business Field'''
>
> Certificate fields:
>
> Number and street: subject:streetAddress (OID: 2.5.4.9)
>
> City or town: subject:localityName (OID: 2.5.4.7)
>
> State or province (where applicable): subject:stateOrProvinceName 
> (OID: 2.5.4.8)
>
> Country: subject:countryName (OID: 2.5.4.6)
>
> Postal code: subject:postalCode (OID: 2.5.4.17)
>
> Required/Optional: --(City, state, and country – Required; Street and 
> postal code – Optional)-- __As stated in Section 7.1.4.2.2 d, e, f, g 
> and h of the Baseline Requirements__
>
> Contents: This field MUST contain the address of the physical location 
> of the Subject’s Place of Business.
>
> --Motion Ends--
>
> *From:* Validation [mailto:validation-bounces at cabforum.org] *On Behalf 
> Of *Bruce Morton via Validation
> *Sent:* Wednesday, January 25, 2017 12:51 PM
> *To:* CA/Browser Forum Validation WG List <validation at cabforum.org 
> <mailto:validation at cabforum.org>>
> *Cc:* Bruce Morton <Bruce.Morton at entrustdatacard.com 
> <mailto:Bruce.Morton at entrustdatacard.com>>
> *Subject:* [cabf_validation] Change to EV 9.2.7
>
> To deal with the Require/Optional requirement or the Place of 
> Business, I propose a simple change which will make the EV Guidelines 
> consistent with the Baseline Requirements.
>
> The EV Guidelines currently state:
>
> *9.2.7. Subject Physical Address of Place of Business Field*
>
> *Certificate fields:*
>
> Number and street: subject:streetAddress (OID: 2.5.4.9)
>
> City or town: subject:localityName (OID: 2.5.4.7)
>
> State or province (where applicable): subject:stateOrProvinceName 
> (OID: 2.5.4.8)
>
> Country: subject:countryName (OID: 2.5.4.6)
>
> Postal code: subject:postalCode (OID: 2.5.4.17)
>
> *Required/Optional:* City, state, and country – Required; Street and 
> postal code – Optional
>
> *Contents:* This field MUST contain the address of the physical 
> location of the Subject’s Place of Business.
>
> To address the Required/Optional issue, I propose the following change.
>
> *9.2.7. Subject Physical Address of Place of Business Field*
>
> *Certificate fields:*
>
> Number and street: subject:streetAddress (OID: 2.5.4.9)
>
> City or town: subject:localityName (OID: 2.5.4.7)
>
> State or province (where applicable): subject:stateOrProvinceName 
> (OID: 2.5.4.8)
>
> Country: subject:countryName (OID: 2.5.4.6)
>
> Postal code: subject:postalCode (OID: 2.5.4.17)
>
> *Required/Optional:* As stated in Section 7.1.4.2.2 d, e, f, g and h 
> of the Baseline Requirements
>
> *Contents:* This field MUST contain the address of the physical 
> location of the Subject’s Place of Business.
>
>
>
> _______________________________________________
> Validation mailing list
> Validation at cabforum.org
> https://cabforum.org/mailman/listinfo/validation

-- 

Cordiali saluti,

Adriano Santoni
ACTALIS S.p.A.
(Aruba Group)


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4025 bytes
Desc: Firma crittografica S/MIME
URL: <http://cabforum.org/pipermail/validation/attachments/20170303/c2dd9b38/attachment.bin>